@zaalipro/dsh-workflows 0.1.0-rc.12

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zaali
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE.md

@@ -0,0 +1,224 @@
+# @zaalipro/dsh-workflows notices
+
+Copyright (c) 2026 Zaali. This package is licensed under the MIT License in
+the adjacent `LICENSE` file.
+
+## workflow compatibility evaluator
+
+The package includes an adapted workflow evaluator derived from the DeepSeek
+Harness `workflow-worker-thread` implementation at behavioral reference commit
+`391c829343`. The vendored source is Copyright (c) 2026 DeepSeek and licensed
+under the MIT License. Its complete license and provenance summary are shipped
+as `vendor/workflow-engine/LICENSE` and `vendor/workflow-engine/README.md`.
+
+## fs-native-extensions 1.5.0
+
+This package includes `fs-native-extensions` version 1.5.0, from
+<https://github.com/holepunchto/fs-native-extensions>.
+
+The upstream package identifies Kasper Isager Dalsgarð as its author. Its
+distributed license contains no separate project-specific NOTICE file or
+filled-in copyright notice; the complete distributed Apache License 2.0 text,
+including its copyright-holder template, follows.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.i18n.yaml

@@ -0,0 +1,4 @@
+# Bilingual-pair consistency record: git blob hash of each side at the last
+# confirmed-consistent state. Both languages carry equal authority.
+README.md: 101a4c2bd8d6715cb1930bbb1d83b02dfd31c8fd
+README.zh.md: 62385aded2693528e7530fedf14982de5d72c510

package/README.md

@@ -0,0 +1,111 @@
+# @zaalipro/dsh-workflows
+
+English | [中文](README.zh.md)
+
+`@zaalipro/dsh-workflows@0.1.0-rc.12` is one installable DeepSeek Harness bundle for saved JavaScript workflows, supervised background runs, retained inspection, slash commands, and the Web dashboard. It targets official DeepSeek Harness `0.1.6-alpha.1` and ships one package-owned MIT compatibility evaluator for replay-safe background execution; it contains no Grok CLI code, account, quota, binary, protocol, or runtime dependency, and no Rhai parser or evaluator.
+
+## Compatibility
+
+The verified Host is official DeepSeek Harness **`0.1.6-alpha.1`**. Plugin `0.1.0-rc.12` is compiled and smoke-tested against that exact release, and its direct Harness peer dependencies are pinned to that exact version. Stock `0.1.0-rc.12` remains unsupported, and later Harness versions require a new verified plugin release.
+
+This release enables the alpha Host’s `workflow-ptc` provider instead of the removed `workflow-worker-thread` provider. Supervised plugin runs still use the package-owned replay evaluator; this release does not change its isolation model or retained-run format. Keep plugin `0.1.0-rc.6` when running Harness `0.1.5-rc.1`.
+
+The package requires Node `^22.19.0 || >=24.0.0`, uses `pnpm@11.7.0`, and is distributed under the [MIT license](LICENSE). Native-lock attribution is in [NOTICE.md](NOTICE.md).
+
+## Installation
+
+Ensure `pnpm` is on the service user's `PATH`. Install the pinned release tag like any other profile plugin; it adds one dependency and one bundle layer named `@zaalipro/dsh-workflows`, with no manual profile patch or install-time build.
+
+```sh
+dsh plugin --profile web add github:zaalipro/dsh-workflows#v0.1.0-rc.12
+dsh plugin --profile headless add github:zaalipro/dsh-workflows#v0.1.0-rc.12
+```
+
+For an exact tested tarball copied to a durable path (not `/tmp`):
+
+```sh
+dsh plugin --profile web add /absolute/path/zaalipro-dsh-workflows-0.1.0-rc.12.tgz
+dsh plugin --profile headless add /absolute/path/zaalipro-dsh-workflows-0.1.0-rc.12.tgz
+```
+
+After `0.1.0-rc.12` is publicly published on npm, the equivalent registry install is:
+
+```sh
+dsh plugin --profile web add @zaalipro/dsh-workflows@0.1.0-rc.12
+dsh plugin --profile headless add @zaalipro/dsh-workflows@0.1.0-rc.12
+```
+
+Web loads the Host product and browser Client; headless loads only the Host product and never evaluates browser code. The plugin leaves the stock `ctx.workflowEngine` untouched. Its supervisor privately uses the package-owned compatibility evaluator emitted as `lib/compat-engine/index.js` and `worker.cjs`.
+
+## Removal
+
+Remove both the dependency and bundle entry, then restart the profile:
+
+```sh
+dsh plugin --profile web remove @zaalipro/dsh-workflows
+dsh plugin --profile headless remove @zaalipro/dsh-workflows
+```
+
+The unmodified official profile boots after removal; the command does not rewrite an official profile file.
+
+## Saved definitions and authoring
+
+Definitions and runs are different resources. A definition is a flat UTF-8 `<name>.workflow.json` file discovered from the first winning root in this order: a configured bundled root, the nearest Git project root's `.dsh/workflows` directory (or the Session cwd when no Git root exists), then `$DSH_HOME/workflows`. Missing roots are allowed; an unsafe, malformed, oversized, linked, or otherwise invalid matching file makes the complete observation fail instead of disappearing from the catalog.
+
+Each file contains exactly metadata-as-data and one plain JavaScript body:
+
+```json
+{
+  "meta": {
+    "name": "review-changes",
+    "description": "Review a change and verify the findings",
+    "whenToUse": "Before merge",
+    "phases": [
+      { "title": "Review" },
+      { "title": "Verify" }
+    ]
+  },
+  "script": "phase(\"Review\");\nconst review = await agent(\"Review the requested change. Return evidence.\", { label: \"reviewer\", phase: \"Review\" });\nif (review === null) complete({ ok: false, reason: \"review failed\" });\nphase(\"Verify\");\nconst verified = await agent(`Verify this review against the workspace:\\n${review}`, { label: \"verifier\", phase: \"Verify\" });\ncomplete({ ok: verified !== null, review, verified });"
+}
+```
+
+Names are lowercase kebab-case, start with a letter, use at most 64 UTF-16 code units, match the filename stem, and avoid command-reserved and Windows device names. Run `/create-workflow [detail]` for the installed authoring skill, which gathers intent and fan-out, writes JavaScript with metadata kept as JSON data, validates one representative args-selected path with canned agent results, and saves only after that smoke check succeeds. Its inline tool call defaults to `save_scope: "project"`, or uses `save_scope: "user"` for `$DSH_HOME/workflows`; user scope works without a Session cwd. See the installed [authoring skill](skills/create-workflow/SKILL.md) for the complete hook and quota reference.
+
+Structured `agent()` schemas may put inclusive `minItems` and `maxItems` bounds on array nodes. Each bound must be a non-negative safe integer (not `-0`), `minItems` cannot exceed `maxItems`, and neither keyword may sit beside `oneOf`. The evaluator checks the declaration before launching a child and checks the returned value again; its stock-RC2 adaptation removes the two keywords only from the provider-facing schema copy.
+
+## Launch and operate
+
+Launch a saved definition with `/workflow <name> [<json-args>]` or its generated `/<name> [<json-args>]` alias. An ordinary command keeps a colliding bare name; the workflow receives the first free repeatedly prefixed alias such as `/workflow-review-changes`, while `/workflow review-changes` always works. Launch returns immediately with `Started workflow "<display-name>" in the background. Open /workflows to watch it.`; later runs of the same metadata name use display handles such as `review-changes-2` without exposing internal ids.
+
+In Web, bare `/workflow` opens the saved-definition picker and exact bare `/workflows` is a browser-only slash action that opens the dashboard without Host command lifecycle events or a model turn. Arguments and attachments are refused locally and remain in the composer. In headless, bare `/workflow` prints usage; `/workflows` is intentionally not a Host command because there is no dashboard surface. The dashboard lists saved definitions with Start, plus live and retained runs, phases, agent spend, member outcomes, logs, terminal results, and chunked scratch artifacts. Pause, Resume, Stop, and eligible Save actions are revision-checked; keyboard and narrow-screen drill-down remain available.
+
+An eligible terminal run attempts one owner-visible completion notice. It prefers bounded `scratch/report.md`, otherwise uses a bounded result preview, and ends with `Open /workflows to inspect the run.` The notice is appended directly to the durable Session surface, so it becomes visible without waking the model or entering an Agent inbox. Delivery is at most once: a process failure may omit a notice but cannot retry a claimed, delivered, or abandoned notice.
+
+## Replay, recovery, and security
+
+Pause and Resume are **same-process only**. After an attempt result settles and disposal drains admitted child and scratch work, the package evaluator's quiescent checkpoint is the only replay authority. Matching committed journal calls replay without spending another agent or repeating their committed effects; observer events are not authority. An external effect whose result did not commit can run again, so effectful prompts and verification steps must be idempotent.
+
+`await_user()` resumes the same acknowledged attempt and commits that gate; `pause()` is uncommitted and re-fires on replay while its condition remains true. A `budget-limited` run cannot be resumed by a human control: the model tool must use the internal resume token with an absolute `agent_budget` greater than the old total and no greater than 1,024.
+
+Process death converts every retained active row to non-resumable **Interrupted**, cancels its displayed running members, and restores inspection data only. No Agent, args, script authority, journal, checkpoint, gate, child reference, or effect claim is reconstructed across processes; Interrupted runs cannot Resume or Save.
+
+The version-2 store lives under `$DSH_HOME/workflow-runs`. One permanent `.workflow-storage.lock` anchor holds a native advisory lease for the Host lifetime, and a second cooperating process fails with `workflow storage root is already owned by another live process`. Descriptor-rooted identity, owner, mode, type, and link checks fail closed. The lease coordinates cooperating same-user Hosts; it is not a defense against a malicious process running as the same OS user and ignoring the lease or replacing its anchor.
+
+Workflow scripts have the same trust premise as existing model shell access. A worker and `node:vm` shape available APIs and contain the host event loop, but they are not a hostile-code security sandbox.
+
+## Limitations
+
+- Workflow bodies are plain JavaScript with top-level `await`; there is no Rhai language path.
+- Workflow scripts have no nested `workflow()` hook.
+- Cross-process execution resume and exactly-once external effects are not provided.
+- This package neither contacts nor reuses Grok CLI in any form.
+- Validate-only compiles the full script but executes one args-selected path with canned outputs; it does not cover every branch, live tool, or possible agent response.
+
+## Documentation
+
+- [User guide](docs/user-guide.md) — create, validate, launch, inspect, control, and troubleshoot workflows.
+- [Architecture](docs/architecture.md) — Host/Client composition, lifecycle authority, storage, Remote paging, and package build.
+- [Testing and release acceptance](docs/testing.md) — automated evidence and the final manual Web checklist.
+- [Installed authoring skill](skills/create-workflow/SKILL.md) — JavaScript globals, schemas, budgets, scratch, and safe authoring patterns.
+- [License](LICENSE) and [native dependency notice](NOTICE.md).
+- Official Harness `0.1.6-alpha.1` supplies the Host, Agent, Session, provider, and Client services. The plugin compatibility evaluator owns its private deferred-start, journal, gate, scratch, and checkpoint protocol.

package/README.zh.md

@@ -0,0 +1,111 @@
+# @zaalipro/dsh-workflows
+
+[English](README.md) | 中文
+
+`@zaalipro/dsh-workflows@0.1.0-rc.12` 是一个可安装的 DeepSeek Harness bundle，提供已保存的 JavaScript workflow、受监督的后台运行、保留记录检查、斜杠命令和 Web 仪表盘。它面向官方 DeepSeek Harness `0.1.6-alpha.1`，并附带一个由本包拥有、采用 MIT 许可的 compatibility evaluator，以提供 replay-safe background execution；它不包含任何 Grok CLI 代码、账户、配额、二进制文件、协议或运行时依赖，也不包含 Rhai 解析器或求值器。
+
+## 兼容性
+
+已验证的 Host 是官方 DeepSeek Harness **`0.1.6-alpha.1`**。Plugin `0.1.0-rc.12` 针对该精确版本编译并完成 smoke test，其直接 Harness peer dependency 也精确锁定在该版本。原版 `0.1.0-rc.12` 仍不受支持；更高 Harness 版本需要新的已验证 plugin release。
+
+本包要求 Node `^22.19.0 || >=24.0.0`，使用 `pnpm@11.7.0`，并按 [MIT license](LICENSE) 发布。原生锁依赖的归属信息见 [NOTICE.md](NOTICE.md)。
+
+此版本启用 alpha Host 的 `workflow-ptc` provider，替代已移除的 `workflow-worker-thread` provider。插件的受监督 run 仍使用 package-owned replay evaluator；本次发布不改变其隔离模型或 retained-run 格式。使用 Harness `0.1.5-rc.1` 时请保留插件 `0.1.0-rc.6`。
+
+## 安装
+
+先确保 service user 的 `PATH` 中有 `pnpm`。像其他 profile plugin 一样安装固定 release tag；它增加一个依赖和一个名为 `@zaalipro/dsh-workflows` 的 bundle 层，无需手动 profile patch 或 install-time build。
+
+```sh
+dsh plugin --profile web add github:zaalipro/dsh-workflows#v0.1.0-rc.12
+dsh plugin --profile headless add github:zaalipro/dsh-workflows#v0.1.0-rc.12
+```
+
+也可以把 exact tested tarball 复制到 durable path（不要使用 `/tmp`）后安装：
+
+```sh
+dsh plugin --profile web add /absolute/path/zaalipro-dsh-workflows-0.1.0-rc.12.tgz
+dsh plugin --profile headless add /absolute/path/zaalipro-dsh-workflows-0.1.0-rc.12.tgz
+```
+
+`0.1.0-rc.12` 在 npm 公开发布后，可以使用等价的 registry install：
+
+```sh
+dsh plugin --profile web add @zaalipro/dsh-workflows@0.1.0-rc.12
+dsh plugin --profile headless add @zaalipro/dsh-workflows@0.1.0-rc.12
+```
+
+Web 会加载 Host 产品和浏览器 Client；headless 只加载 Host 产品，绝不求值浏览器代码。Plugin 不修改 stock `ctx.workflowEngine`。Supervisor 私下使用本包拥有的 compatibility evaluator，其产物为 `lib/compat-engine/index.js` 与 `worker.cjs`。
+
+## 移除
+
+同时移除依赖和 bundle 条目，然后重启 profile：
+
+```sh
+dsh plugin --profile web remove @zaalipro/dsh-workflows
+dsh plugin --profile headless remove @zaalipro/dsh-workflows
+```
+
+移除后，未修改的官方 profile 可以启动；该命令不会就地改写官方 profile 文件。
+
+## 已保存定义与创作
+
+定义和运行是不同资源。定义是扁平的 UTF-8 `<name>.workflow.json` 文件，按以下顺序选择第一个胜出的根：已配置的 bundled 根、最近 Git 项目根的 `.dsh/workflows` 目录（没有 Git 根时使用 Session cwd），最后是 `$DSH_HOME/workflows`。根不存在是合法情况；已观察到的匹配文件若不安全、格式错误、过大、为链接或存在其他无效情况，整个观察会失败，而不是从目录中静默消失。
+
+每个文件只包含作为数据的 metadata 和一个纯 JavaScript body：
+
+```json
+{
+  "meta": {
+    "name": "review-changes",
+    "description": "Review a change and verify the findings",
+    "whenToUse": "Before merge",
+    "phases": [
+      { "title": "Review" },
+      { "title": "Verify" }
+    ]
+  },
+  "script": "phase(\"Review\");\nconst review = await agent(\"Review the requested change. Return evidence.\", { label: \"reviewer\", phase: \"Review\" });\nif (review === null) complete({ ok: false, reason: \"review failed\" });\nphase(\"Verify\");\nconst verified = await agent(`Verify this review against the workspace:\\n${review}`, { label: \"verifier\", phase: \"Verify\" });\ncomplete({ ok: verified !== null, review, verified });"
+}
+```
+
+名称采用小写 kebab-case，以字母开头，不超过 64 个 UTF-16 code unit，与文件名 stem 一致，并避开命令保留名和 Windows 设备名。运行 `/create-workflow [detail]` 可调用已安装的创作 skill；它会收集意图与 fan-out，用 JSON data 保存 metadata 并编写 JavaScript，使用 canned agent result 验证一个有代表性的 args-selected path，而且只在 smoke check 成功后保存。Inline tool call 默认使用 `save_scope: "project"`，也可用 `save_scope: "user"` 保存到 `$DSH_HOME/workflows`；user scope 不要求 Session cwd。完整 hook 与 quota 参考见已安装的[创作 skill](skills/create-workflow/SKILL.md)。
+
+Structured `agent()` schema 可以在 array 节点上使用包含端点的 `minItems` 与 `maxItems` bound。每个 bound 必须是非负 safe integer（不能是 `-0`），`minItems` 不得超过 `maxItems`，且两个 keyword 都不能与 `oneOf` 并列。Evaluator 会在 child 启动前检查 declaration，并再次检查返回值；stock-RC2 adaptation 只会从 provider-facing schema 副本中移除这两个 keyword。
+
+## 启动与操作
+
+使用 `/workflow <name> [<json-args>]` 或生成的 `/<name> [<json-args>]` alias 启动已保存定义。普通命令会保留冲突的裸名称；workflow 会取得第一个可用的重复前缀 alias，例如 `/workflow-review-changes`，而 `/workflow review-changes` 始终可用。启动会立即返回 `Started workflow "<display-name>" in the background. Open /workflows to watch it.`；同一 metadata name 的后续运行使用 `review-changes-2` 等 display handle，不暴露内部 id。
+
+在 Web 中，裸 `/workflow` 打开已保存定义选择器；严格的裸 `/workflows` 是仅由浏览器处理的 slash action，它打开 dashboard，不产生 Host command lifecycle，也不会唤醒模型。参数和附件会在本地被拒绝并保留在 composer 中。在 headless 中，裸 `/workflow` 输出 usage；由于不存在 dashboard surface，`/workflows` 不注册为 Host command。仪表盘列出已保存 definition（可 Start），以及 live 与 retained run、phase、agent spend、member outcome、log、terminal result 和分块 scratch artifact。Pause、Resume、Stop 与符合条件的 Save action 都检查 revision；键盘操作和窄屏 drill-down 同样可用。
+
+符合条件的 terminal run 最多尝试一次 owner-visible completion notice。它优先使用有界的 `scratch/report.md`，否则使用有界 result preview，并以 `Open /workflows to inspect the run.` 结尾。Notice 会直接追加到 durable Session surface，因此无需唤醒模型或进入 Agent inbox 即可显示。Notice delivery 是 at most once：进程故障可能导致 notice 缺失，但不会重试已 claimed、delivered 或 abandoned 的 notice。
+
+## Replay、恢复与安全
+
+Pause 和 Resume **仅限同一进程（same-process only）**。attempt result settle 且 disposal 排空已接纳的 child 与 scratch work 后，package evaluator 的 quiescent checkpoint 是唯一 replay authority。匹配且已提交的 journal call 会 replay，不再次消耗 agent，也不重复其已提交 effect；observer event 不是 authority。若外部 effect 的结果尚未提交，它可能再次执行，因此 effectful prompt 与 verification step 必须保持幂等。
+
+`await_user()` 会继续同一个已确认 attempt 并提交该 gate；`pause()` 不提交，在 replay 后条件仍成立时会重新触发。`budget-limited` run 不能通过人工 control 恢复：model tool 必须使用内部 resume token，并提供比旧 total 更大且不超过 1,024 的绝对 `agent_budget`。
+
+进程退出会把每个 retained active row 转换为不可恢复的 **Interrupted**，取消界面上仍在运行的 member，并且只恢复 inspection data。系统不会跨进程重建 Agent、args、script authority、journal、checkpoint、gate、child reference 或 effect claim；Interrupted run 不能 Resume 或 Save。
+
+version-2 store 位于 `$DSH_HOME/workflow-runs`。一个永久 `.workflow-storage.lock` anchor 在 Host 生命周期内持有 native advisory lease；第二个协作进程会收到 `workflow storage root is already owned by another live process`。descriptor-rooted identity、owner、mode、type 和 link 检查都会 fail closed。该 lease 只协调同一用户下相互协作的 Host；它不能防御以同一 OS 用户运行、忽略 lease 或替换 anchor 的恶意进程。
+
+Workflow script 与现有 model shell access 具有相同的 trust premise。worker 和 `node:vm` 用于塑造可用 API 并隔离 host event loop，但不是 hostile-code security sandbox。
+
+## 限制
+
+- Workflow body 是支持 top-level `await` 的纯 JavaScript；不存在 Rhai language path。
+- Workflow script 不提供嵌套 `workflow()` hook。
+- 不提供 cross-process execution resume 或 exactly-once external effect。
+- 本包不会以任何形式联系或复用 Grok CLI。
+- Validate-only 会编译完整 script，但只执行一个使用 canned output 的 args-selected path；它不覆盖所有 branch、live tool 或所有可能的 agent response。
+
+## 文档
+
+- [用户指南](docs/user-guide.zh.md) — 创建、验证、启动、检查、控制 workflow 并排查故障。
+- [架构](docs/architecture.zh.md) — Host/Client composition、lifecycle authority、storage、Remote paging 和 package build。
+- [测试与发布验收](docs/testing.zh.md) — 自动化证据与最终人工 Web checklist。
+- [已安装的创作 skill](skills/create-workflow/SKILL.md) — JavaScript global、schema、budget、scratch 和安全创作模式。
+- [License](LICENSE) 与[原生依赖 notice](NOTICE.md)。
+- 官方 Harness `0.1.6-alpha.1` 提供 Host、Agent、Session、provider 与 Client service。Plugin compatibility evaluator 私下拥有 deferred-start、journal、gate、scratch 与 checkpoint protocol。

package/cordis.patch.yml

@@ -0,0 +1,10 @@
+- id: workflow-ptc
+  name: '@deepseek-ai/dsh-workflow-ptc'
+  disabled: false
+  config:
+    provider: spawn
+- id: ui-workflow-run
+  disabled: true
+- insert:
+    - id: zaalipro-workflows
+      name: '@zaalipro/dsh-workflows'

package/docs/architecture.i18n.yaml

@@ -0,0 +1,4 @@
+# Bilingual-pair consistency record: git blob hash of each side at the last
+# confirmed-consistent state. Both languages carry equal authority.
+architecture.md: 6562da5e6a64dd21701fe73c6a08924cdc9c5df7
+architecture.zh.md: 7d8e5737c406be91d84e52124ccf84745ded4d78